> “Click a link in the email” is a tiny bit better because it takes the user straight to the GOOD website

I don't know, some would say taking an attack from trivial to virtually impossible is a bit more than a "tiny bit".